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Office of the Maryland Attorney General 
Attn: Security Breach Notification 
200 St. Paul Place 
Baltimore, MD 21202 

Re: Dale A. Wein, Prof. LLC - Incident Notification 

Dear Sir or Madam: 

McDonald Hopkins PLC represents Dale A. Wein, Prof LLC (“Wein”). I write to provide 
notification concerning an incident that may affect the security of personal information of two 
(2) Maryland residents. Wein’s investigation is ongoing and this notification will be 
supplemented with any new significant facts or findings subsequent to this submission, if any. 
By providing this notice, Wein does not waive any rights or defenses regarding the applicability 
of Maryland law or personal jurisdiction. 

On July 12, 2016, Wein discovered that as a result of a sophisticated network intrusion 
between late May 2016 and July 12, 2016, an unauthorized third party gained access to one of its 
servers. Upon learning of the issue, Wein immediately commenced a full investigation, 
including notifying the U.S. Trustee’s Office and law enforcement. Also as part of the 
investigation, Wein has been working very closely with external cybersecurity professionals that 
regularly investigate and analyze these types of incidents. The investigation and remediation 
efforts are now completed, and Wein has removed the infection from its system. Wein also 
immediately changed passwords and took other steps to enhance the security of its network. 

Based on the comprehensive forensic investigation and document review, which was 
concluded on September 1, 2016, Wein cannot conclusively determine whether the unauthorized 
party actually acquired or viewed any personal information. Wein confirmed that the 
unauthorized party may have accessed some personal information within the infected server, 
including full names and Social Security numbers. 

To date, Wein is not aware of any confirmed instances of identity fraud as a direct result 
of this incident. Nevertheless, Wein wanted to make you (and the affected residents) aware of 
the incident and explain the steps Wein is taking to help safeguard the residents against identity 
fraud. Wein will be providing the Maryland residents with written notice of this incident 
commencing on October 1, 2016, in substantially the same form as the letter attached hereto. 
Wein is offering the residents a complimentary membership with a credit monitoring and identity 
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theft protection service and is providing dedicated call center support to answer questions. Wein 
has advised the residents to remain vigilant in reviewing financial account statements for 
fraudulent or irregular activity. Wein has advised the residents about the process for placing a 
fraud alert on their credit files, placing a security freeze, and obtaining a free credit report. The 
residents also have been provided with the contact information for the consumer reporting 
agencies and the Federal Trade Commission. 

Wein takes its obligation to help protect personal information very seriously. Wein is 
continually evaluating and modifying its practices to enhance the security and privacy of 
personal information. 

Should you have any questions regarding this notification, please contact me at (248) 
220-1356 or dpaluzzi@mcdonaldhopkins.com. 


Sincerely, 



Dominic A. Paluzzi 


Enel. 
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Dale A. Wein, Prof. LLC 


ATTOftMEV ~ BAMKBUPTCYTHUBTEK 


IMPORTANT INFORMA TION 
PLEASE READ CAREFULLY 

October 1, 2016 



Dear 



The privacy of your personal information is of the utmost importance to Dale A. Wein, Prof. 
LLC. I am writing with important information about a recent incident involving the security of some of 
the personal information that we maintain as a result of being appointed as your trustee. We want 
to provide you with information regarding the incident and explain the services we are making 
available to help safeguard you against identity fraud. We also are providing additional steps you 
can take to help protect your information. 

On July 12, 2016, we discovered that as a result of a sophisticated network intrusion between 
late May 2016 and July 12, 2016, an unauthorized third party gained access to one of our servers. 
Upon learning of the issue, our incident response team promptly launched an investigation and 
notified the U.S. Trustee's Office and law enforcement. As part of our investigation, we have been 
working very closely with a cybersecurity firm that regularly investigates and analyzes these types of 
incidents. Their investigation and remediation efforts are now completed, and we have removed the 
infection from our system. We also immediately changed passwords and took other steps to enhance 
the security of our network. 

We have devoted considerable time and effort to determine what exact information may 
have been contained in the affected server and, as such, may be at risk of disclosure. However, 
based on our comprehensive forensic investigation and document review, which was concluded on 
September 1, 2016, we cannot conclusively determine whether the unauthorized party actually 
acquired or viewed any of your personal information. Because we value our relationship with you, 
we wanted to make you aware of this incident because the unauthorized party may have accessed 
some of your personal information within the infected server, including your full name and Social 
Security number. 

To date, we are not aware of any reports of identity fraud or improper use of information 
as a direct result of this incident. 
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However, to protect you from potential misuse of your information, we are providing you with 
one year of free credit monitoring and identity theft protection services. Enclosed in this letter, you 
will find information on enrolling in a 12-month membership of Experian ; s ProtectMylD® Alert, a 
credit monitoring and identity theft protection service, along with other precautionary measures you 
can take to protect your personal information, including placing a Fraud Alert, placing a Security 
Freeze, and/or obtaining a free credit report. Additionally, you should always remain vigilant in 
reviewing your financial account statements for fraudulent or irregular activity on a regular basis. 

Please accept my sincere apologies, on behalf of Dale A. Wein, Prof. LLC, that this incident 
occurred - we deeply regret any inconvenience or concern this issue may cause you. Safeguarding 
the privacy and security of your personal information is a top priority, and we are taking proactive 
steps to strengthen our IT systems moving forward to help prevent similar issues in the future. 

If you have any further questions regarding this incident, please call our dedicated and 
confidential toll-free response line that we have set up to respond to questions at 1-844-369-9359. 

This response line is staffed with professionals familiar with this incident and knowledgeable on what 
you can do to protect against misuse of your information. The response line is available Monday 
through Friday, 8 a.m. to 8 p.m. CST. 


Sincerely, 



Dale A. Wein 
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- OTHER IMPORTANT INFORMATION - 


1. Enrolling in Complimentary 12-Month Credit Monitoring . 

Protecting your personal information is important to Dale A. Wein, Prof. LLC. In response to this security 
incident and as a precautionary measure, we have arranged for you to enroll in Experian 5 s'* ProtectMylD® Alert 
for a one year period at no cost to you. This protection is provided by Experian, one of the three major 
nationwide credit reporting companies. 

Activate Experian’s® ProtectMylD Now in Three Easy Steps: 

1 . ENSURE that you enroll by December 18, 2016. 

2. VISIT the ProtectMylD Web Site to enroll: www.protectmyid.com/redeem 

3. PROVIDE your 9-character Activation Code: | I 

If you have questions or need an alternative to enrolling online, please call 877-288-8057 and provide 
Engagement fi 

Additional Details Regarding Your 12-Month ProtectMylD Membership: 

A credit card is not required for enrollment. 

Once your ProtectMylD membership is activated, you will receive the following features: 

■ Free copy of your Experian credit report 

■ Surveillance Alerts for: 

o Daily Bureau Credit Monitoring: Alerts of key changes & suspicious activity found on your 
Experian, Equifax* 8 ' and TransUnion® credit reports. 

■ Identity Theft Resolution & ProtectMylD ExtendCARE: Toll-free access to US-based customer care 
and a dedicated Identify Theft Resolution agent who will walk you through the process of fraud 
resolution from start to finish for seamless service. They will investigate each incident; help with 
contacting credit grantors to dispute charges and close accounts including credit, debit and medical 
insurance cards; assist with freezing credit files; contact government agencies. 

o It is recognized that identity theft can happen months and even years after an incident. To offer 
added protection, you will receive ExtendCARE lM , which provides you with the same high- 
level of Fraud Resolution support even after your ProtectMylD membership has expired. 

* $1 Million Identity Theft Insurance: Immediately covers certain costs including lost wages, private 

investigator fees, and unauthorized electronic fund transfers. (Identity theft insurance is underwritten by insurance 
company subsidiaries or affiliates of AIG. The description herein is a summary and intended for informational purposes only and does not 
include all terms, conditions and exclusions of the policies described Please refer to the actual policies for terms, conditions, and exclusions of 
coverage. Coverage may not be available in all jurisdictions,) 


Once your enrollment in ProtectMylD is complete, you should carefully review your credit report for inaccurate 
or suspicious items. If you have any questions about ProtectMylD, need help understanding something on your 
credit report or suspect that an item on your credit report may be fraudulent, please contact Experian’s customer 
care team at 877-288-8057. 
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2 . 


Placing g Fraud Alert . 


Whether or not you choose to use the complimentary 12 month credit monitoring services, we recommend that 
you place an initial 90-day “Fraud Alert” on your credit files, at no charge. A fraud alert tells creditors to 
contact you personally before they open any new accounts. To place a fraud alert, call any one of the three 
major credit bureaus at the numbers listed below. As soon as one credit bureau confirms your fraud alert, they 
will notify the others. 


Equifax 

P.O.Box 105069 
Atlanta, GA 30348 
www.equifax.com 
1-800-525-6285 


Experian 

P.O. Box 2002 
Allen, TX 75013 
www. experian. com 
1-888-397-3742 


TransUnion 

P.O. Box 2000 
Chester, PA 19022 
www.transunion.com 
1-800-680-7289 


3. Consider Placing a Security Freeze on Your Credit File . 

If you are very concerned about becoming a victim of fraud or identity theft, you may request a “Security 
Freeze” be placed on your credit file. A security freeze prohibits, with certain specific exceptions, the consumer 
reporting agencies from releasing your credit report or any information from it without your express 
authorization. You may place a security freeze on your credit report by sending a request in writing, by mail, to 
all three nationwide credit reporting companies. To find out more on how to place a security freeze, you can use 
the following contact information: 

Equifax Security Freeze Experian Security Freeze 

PO Box 105788 PO Box 9554 

Atlanta, GA 30348 Allen, TX 75013 

https://www.freeze.equifax.com http://experian.com/freeze 
1-800-685-1111 1-888-397-3742 


4. Obtaining a Free Credit Report . 

Under federal law, you are entitled to one free credit report every 12 months from each ot the above three major 
nationwide credit reporting companies. Call 1-877-322-8228 or request your free credit reports online at 
www.annualcreditreport.com. Once you receive your credit reports, review them for discrepancies. Identify 
any accounts you did not open or inquiries from creditors that you did not authorize. Verify all information is 
correct. If you have questions or notice incorrect information, contact the credit reporting company. 


TransUnion Security Freeze 

P.O. Box 2000 
Chester, PA 19022 

http://www.transunion.com/securityfreeze 

1-800-680-7289 


5. Additional Helnful Resources . 

Even if you do not find any suspicious activity on your initial credit reports, the Federal Trade Commission 
(FTC) recommends that you check your credit reports periodically. Checking your credit report periodically can 
help you spot problems and address them quickly. 

If you find suspicious activity on your credit reports or have reason to believe your information is being 
misused, call your local law enforcement agency and file a police report. Be sure to obtain a copy of the police 
report, as many creditors will want the information it contains to absolve you of the fraudulent debts. You may 
also file a complaint with the FTC by contacting them on the web at www.ftc.gov/idtheft, by phone at 1-877- 
IDTHEFT (1-877-438-4338), or by mail at Federal Trade Commission, Consumer Response Center, 600 
Pennsylvania Avenue, NW, Washington, DC 20580. Your complaint will be added to the FTC’s Identity Theft 
Data Clearinghouse, where it will be accessible to law enforcement for their investigations. In addition, you 
may obtain information from the FTC about fraud alerts and security freezes. 
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